IT security
Security audit of your website, servers and systems, vulnerability fixes and protection — before attackers find the holes.
What we solve
Nobody knows where the holes are
The last security check was years ago — or never.
Outdated software
Old CMS versions, plugins and libraries with known vulnerabilities.
Too many people with access
Former employees and contractors still have passwords and keys.
Breaches noticed too late
A hacked site or a leaked database is found by customers, not by you.
What's included
Security audit
Website, servers, cloud accounts and access rights.
Penetration testing
We attack your web application the way a real attacker would — with your written permission.
Vulnerability fixes
We fix what we find or give your team clear instructions.
Updates and dependencies
Automatic checks of libraries, containers and server packages.
Access control
Two-factor login, a password manager, VPN and minimal access rights.
Attack protection
Firewall, brute-force protection, rate limits and bot filtering.
Logs and alerts
Suspicious logins and unusual activity reach you right away.
Incident response
If you have been hacked, we stop the attack, find the cause and restore clean data.
How we work
Agreement
Scope, rules and written permission for testing.
Audit
We check your systems without stopping your work.
Report
Risks sorted by severity, in plain language, with a plan of fixes.
Fixes
Critical issues first, then everything else.
Re-check
We make sure the holes are really closed; regular checks on request.
Technologies
- OWASP Top 10 · ASVS
- Burp Suite · OWASP ZAP
- Nmap
- Trivy · Dependabot
- WireGuard
- Fail2ban · CrowdSec
- Cloudflare
Most attacks on small and medium businesses are not sophisticated: an old plugin, a leaked password, an admin panel open to the whole internet. We find these holes first, close them and set up protection, so security becomes a routine instead of an emergency.
Common questions
Can testing break our site?
No. We agree on the time and limits in advance, and risky tests run on a copy or at night.
We have been hacked. Can you help?
Yes. Write or call us — first we stop the attack and keep the evidence, then we find the cause and close the hole.
Do you help with personal data protection?
We handle the technical side — encryption, access, logs and backups — and give your lawyer the technical details the documents need.
How often should we check security?
At least once a year and after every major release. Dependency checks run automatically all the time.
Let's discuss your project
Call or write — we reply within one business day. +381 11 000 0000 · hello@tech-union.rs